Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/kKVTcDtxUO4HnsqTYLGCjaszDC4.roa
File: kKVTcDtxUO4HnsqTYLGCjaszDC4.roa (raw, json)
Hash identifier: BzZ0NF1gpbO7bnAqq4Opdp7oG5NZ+nM2gtqP3q6bPao=
Subject key identifier: 90:A5:53:70:3B:71:50:EE:07:9E:CA:93:60:B1:82:8D:AB:33:0C:2E
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 01A0D4C0B698C45901A50994657D3621E7D2
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/kKVTcDtxUO4HnsqTYLGCjaszDC4.roa
Signing time: Thu 24 Sep 2026 18:49:54 +0000
ROA not before: Thu 24 Sep 2026 18:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219303
IP address blocks: 94.131.17.0/24 maxlen: 24
171.33.241.0/24 maxlen: 24
185.39.30.0/24 maxlen: 24
185.253.0.0/24 maxlen: 24
195.28.182.0/23 maxlen: 23
2001:67c:2f6c::/48 maxlen: 48
2a06:fcc0:2::/48 maxlen: 48
2a0a:8c46::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:c0:b6:98:c4:59:01:a5:09:94:65:7d:36:21:e7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Sep 24 18:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90a553703b7150ee079eca9360b1828dab330c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:cf:f4:83:a9:a9:a0:05:03:62:2a:8c:eb:
22:24:09:4d:71:6e:75:98:19:4e:3d:02:60:22:bd:
32:03:15:21:ed:9a:13:97:e5:68:e0:0e:54:c2:8f:
a6:8a:cb:db:10:11:6b:b8:f5:c2:97:0f:86:15:3a:
86:5f:93:e5:93:97:d7:dd:35:15:a8:75:9b:0e:3b:
64:7d:a0:36:8a:d9:10:3c:e9:f1:0a:01:ac:3d:7d:
d0:f9:53:e1:e3:13:df:86:2f:f1:72:5f:eb:8d:b6:
34:4f:0c:d8:6a:94:73:76:07:70:af:92:81:ba:57:
61:37:8e:9f:ac:d7:7a:c1:96:3b:8a:05:f4:44:34:
c0:4a:c7:48:fe:cf:c6:f7:df:91:b1:76:49:22:c6:
45:44:9d:57:24:d5:21:5c:67:82:51:ee:31:ed:1e:
5f:b4:d2:82:e5:44:7b:73:3a:88:83:7c:35:61:50:
d1:95:fe:d7:8b:e4:61:73:c6:56:c2:5d:1e:a7:c0:
69:31:83:cd:38:ec:87:69:b8:bb:1c:c3:4e:b9:7e:
9c:24:b4:88:f7:4b:85:51:da:5c:b9:35:db:44:6a:
5a:d0:40:cf:74:db:ea:01:06:af:09:11:4b:4b:da:
1a:18:3a:a5:1c:38:f7:77:0d:0e:f7:a2:47:a7:dc:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A5:53:70:3B:71:50:EE:07:9E:CA:93:60:B1:82:8D:AB:33:0C:2E
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/kKVTcDtxUO4HnsqTYLGCjaszDC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.17.0/24
171.33.241.0/24
185.39.30.0/24
185.253.0.0/24
195.28.182.0/23
IPv6:
2001:67c:2f6c::/48
2a06:fcc0:2::/48
2a0a:8c46::/32
Signature Algorithm: sha256WithRSAEncryption
32:85:41:eb:db:c3:6c:03:6e:d2:c6:d1:b4:73:b0:5c:9d:75:
36:4e:d7:f5:46:e4:3d:f4:5c:5f:dc:ad:62:74:fd:73:67:ce:
c0:05:2a:8a:74:b3:c7:3b:fb:ac:19:13:1b:9d:a0:9e:d6:30:
fd:15:c6:34:78:23:e3:19:11:82:66:91:4b:b2:83:4d:fe:13:
fe:54:19:30:39:d1:e3:61:29:99:23:16:a0:8e:cf:a9:b0:f8:
c0:65:6d:4f:a9:10:53:14:8f:38:05:72:ae:d7:cb:cc:0c:e6:
f7:c8:42:07:86:10:97:1d:49:47:0c:33:bd:24:07:03:a5:21:
a8:77:a2:02:29:0e:8e:6b:be:89:26:a9:dd:ac:ac:ef:88:ce:
ea:35:21:9d:b2:c0:7d:34:b7:70:11:14:12:98:b4:93:e8:84:
36:8e:73:ef:01:7e:92:46:bd:4f:49:52:f0:80:12:9a:f8:d5:
5c:07:35:dd:24:4e:da:9a:8b:76:3c:79:36:4d:ee:f9:18:83:
86:19:22:f4:86:ce:5a:41:e3:97:c9:b6:bf:7c:87:56:bc:b4:
2a:88:bc:54:17:41:6d:34:ae:9f:e8:c0:11:be:42:f6:94:30:
08:2f:50:aa:31:4d:4a:9b:b4:fa:fc:86:36:bd:4b:05:7d:93:
bb:ba:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:59:55 2026 by rpki-client